# STDOUT: ---v---v---v---v---v--- ansible-playbook 2.9.27 config file = /etc/ansible/ansible.cfg configured module search path = ['/home/jenkins/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /opt/ansible-2.9/lib/python3.9/site-packages/ansible executable location = /opt/ansible-2.9/bin/ansible-playbook python version = 3.9.18 (main, Sep 7 2023, 00:00:00) [GCC 11.4.1 20230605 (Red Hat 11.4.1-2)] Using /etc/ansible/ansible.cfg as config file Skipping callback 'actionable', as we already have a stdout callback. Skipping callback 'counter_enabled', as we already have a stdout callback. Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'dense', as we already have a stdout callback. Skipping callback 'full_skip', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'null', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. Skipping callback 'selective', as we already have a stdout callback. Skipping callback 'skippy', as we already have a stdout callback. Skipping callback 'stderr', as we already have a stdout callback. Skipping callback 'unixy', as we already have a stdout callback. Skipping callback 'yaml', as we already have a stdout callback. PLAYBOOK: tests_multiple_sudoers.yml ******************************************* 1 plays in /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml PLAY [Basic test for Sudo] ***************************************************** TASK [Gathering Facts] ********************************************************* task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:2 Friday 17 May 2024 14:32:37 +0000 (0:00:00.012) 0:00:00.012 ************ ok: [sut] META: ran handlers TASK [Run the role] ************************************************************ task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:7 Friday 17 May 2024 14:32:38 +0000 (0:00:00.675) 0:00:00.688 ************ TASK [linux-system-roles.sudo : Ensure sudo is installed] ********************** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:2 Friday 17 May 2024 14:32:38 +0000 (0:00:00.018) 0:00:00.706 ************ ok: [sut] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.sudo : Set include directories variable] ************** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:8 Friday 17 May 2024 14:32:41 +0000 (0:00:02.699) 0:00:03.406 ************ ok: [sut] => { "ansible_facts": { "sudo_include_dirs": [ "/etc/sudoers.d" ] }, "changed": false } TASK [linux-system-roles.sudo : Set sudoer file paths variable] **************** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:14 Friday 17 May 2024 14:32:41 +0000 (0:00:00.019) 0:00:03.426 ************ ok: [sut] => { "ansible_facts": { "sudo_file_paths": [ "/etc/sudoers", "/etc/sudoers.d/pingers", "/etc/sudoers.d/root" ] }, "changed": false } TASK [linux-system-roles.sudo : Ensure include directories are created] ******** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:20 Friday 17 May 2024 14:32:41 +0000 (0:00:00.018) 0:00:03.444 ************ ok: [sut] => (item=/etc/sudoers.d) => { "ansible_loop_var": "item", "changed": false, "gid": 0, "group": "root", "item": "/etc/sudoers.d", "mode": "0750", "owner": "root", "path": "/etc/sudoers.d", "secontext": "system_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [linux-system-roles.sudo : Ensure sudoers include files are configured] *** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:30 Friday 17 May 2024 14:32:41 +0000 (0:00:00.264) 0:00:03.708 ************ skipping: [sut] => (item=/etc/sudoers) => { "ansible_loop_var": "item", "changed": false, "item": { "aliases": { "cmnd_alias": [ { "commands": [ "/bin/ping" ], "name": "PING" } ], "user_alias": [ { "name": "PINGERS", "users": [ "username" ] } ] }, "defaults": [ "!visiblepw", "always_set_home", "match_group_by_gid", "always_query_group_plugin", "env_reset", { "secure_path": [ "/sbin", "/bin", "/usr/sbin", "/usr/bin" ] }, { "env_keep": [ "COLORS", "DISPLAY", "HOSTNAME", "HISTSIZE", "KDEDIR", "LS_COLORS", "MAIL", "PS1", "PS2", "QTDIR", "USERNAME", "LANG", "LC_ADDRESS", "LC_CTYPE", "LC_COLLATE", "LC_IDENTIFICATION", "LC_MEASUREMENT", "LC_MESSAGES", "LC_MONETARY", "LC_NAME", "LC_NUMERIC", "LC_PAPER", "LC_TELEPHONE", "LC_TIME", "LC_ALL", "LANGUAGE", "LINGUAS", "_XKB_CHARSET", "XAUTHORITY" ] } ], "include_directories": [ "/etc/sudoers.d" ], "path": "/etc/sudoers", "user_specifications": [ { "commands": [ "ALL" ], "hosts": [ "ALL" ], "operators": [ "ALL" ], "users": [ "root" ] }, { "commands": [ "ALL" ], "hosts": [ "ALL" ], "operators": [ "ALL" ], "users": [ "%wheel" ] } ] }, "skip_reason": "Conditional result was False" } changed: [sut] => (item=/etc/sudoers.d/pingers) => { "ansible_loop_var": "item", "changed": true, "checksum": "3ffa0e8be1b62eb452314eb2c459f505e265089a", "dest": "/etc/sudoers.d/pingers", "gid": 0, "group": "root", "item": { "path": "/etc/sudoers.d/pingers", "user_specifications": [ { "defaults": [ "!requiretty" ], "type": "user", "users": [ "PINGERS" ] } ] }, "md5sum": "aa8c59060deff3caca368ae080261e25", "mode": "0440", "owner": "root", "secontext": "system_u:object_r:etc_t:s0", "size": 111, "src": "/root/.ansible/tmp/ansible-tmp-1715956361.560984-2334-204014168486836/source", "state": "file", "uid": 0 } changed: [sut] => (item=/etc/sudoers.d/root) => { "ansible_loop_var": "item", "changed": true, "checksum": "9b1906ff4600437b0a98e620db9bd2f3f4fcb3aa", "dest": "/etc/sudoers.d/root", "gid": 0, "group": "root", "item": { "defaults": [ "syslog=auth" ], "path": "/etc/sudoers.d/root", "user_specifications": [ { "defaults": [ "!set_logname" ], "operators": [ "root" ], "type": "runas" } ] }, "md5sum": "3e2be895126e56d1385116fa7caf03e5", "mode": "0440", "owner": "root", "secontext": "system_u:object_r:etc_t:s0", "size": 158, "src": "/root/.ansible/tmp/ansible-tmp-1715956362.2166579-2334-32430692996286/source", "state": "file", "uid": 0 } TASK [linux-system-roles.sudo : Ensure /etc/sudoers is configured] ************* task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:43 Friday 17 May 2024 14:32:42 +0000 (0:00:01.208) 0:00:04.917 ************ changed: [sut] => (item=/etc/sudoers) => { "ansible_loop_var": "item", "changed": true, "checksum": "53c4c5cd1ee1165327dc5f42de2e3db96573b4dc", "dest": "/etc/sudoers", "gid": 0, "group": "root", "item": { "aliases": { "cmnd_alias": [ { "commands": [ "/bin/ping" ], "name": "PING" } ], "user_alias": [ { "name": "PINGERS", "users": [ "username" ] } ] }, "defaults": [ "!visiblepw", "always_set_home", "match_group_by_gid", "always_query_group_plugin", "env_reset", { "secure_path": [ "/sbin", "/bin", "/usr/sbin", "/usr/bin" ] }, { "env_keep": [ "COLORS", "DISPLAY", "HOSTNAME", "HISTSIZE", "KDEDIR", "LS_COLORS", "MAIL", "PS1", "PS2", "QTDIR", "USERNAME", "LANG", "LC_ADDRESS", "LC_CTYPE", "LC_COLLATE", "LC_IDENTIFICATION", "LC_MEASUREMENT", "LC_MESSAGES", "LC_MONETARY", "LC_NAME", "LC_NUMERIC", "LC_PAPER", "LC_TELEPHONE", "LC_TIME", "LC_ALL", "LANGUAGE", "LINGUAS", "_XKB_CHARSET", "XAUTHORITY" ] } ], "include_directories": [ "/etc/sudoers.d" ], "path": "/etc/sudoers", "user_specifications": [ { "commands": [ "ALL" ], "hosts": [ "ALL" ], "operators": [ "ALL" ], "users": [ "root" ] }, { "commands": [ "ALL" ], "hosts": [ "ALL" ], "operators": [ "ALL" ], "users": [ "%wheel" ] } ] }, "md5sum": "6a9622369d29e9bc6145c6d774059379", "mode": "0440", "owner": "root", "secontext": "system_u:object_r:etc_t:s0", "size": 939, "src": "/root/.ansible/tmp/ansible-tmp-1715956362.7698379-2358-133448066787914/source", "state": "file", "uid": 0 } skipping: [sut] => (item=/etc/sudoers.d/pingers) => { "ansible_loop_var": "item", "changed": false, "item": { "path": "/etc/sudoers.d/pingers", "user_specifications": [ { "defaults": [ "!requiretty" ], "type": "user", "users": [ "PINGERS" ] } ] }, "skip_reason": "Conditional result was False" } skipping: [sut] => (item=/etc/sudoers.d/root) => { "ansible_loop_var": "item", "changed": false, "item": { "defaults": [ "syslog=auth" ], "path": "/etc/sudoers.d/root", "user_specifications": [ { "defaults": [ "!set_logname" ], "operators": [ "root" ], "type": "runas" } ] }, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.sudo : Search for sudoers files in included directories] *** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:63 Friday 17 May 2024 14:32:43 +0000 (0:00:00.603) 0:00:05.520 ************ ok: [sut] => { "changed": false, "examined": 2, "files": [ { "atime": 1715956363.2663865, "ctime": 1715956362.1424162, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 8388929, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0440", "mtime": 1715956361.8844233, "nlink": 1, "path": "/etc/sudoers.d/pingers", "pw_name": "root", "rgrp": true, "roth": false, "rusr": true, "size": 111, "uid": 0, "wgrp": false, "woth": false, "wusr": false, "xgrp": false, "xoth": false, "xusr": false }, { "atime": 1715956363.2663865, "ctime": 1715956362.6744022, "dev": 51713, "gid": 0, "gr_name": "root", "inode": 14680385, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mode": "0440", "mtime": 1715956362.4754076, "nlink": 1, "path": "/etc/sudoers.d/root", "pw_name": "root", "rgrp": true, "roth": false, "rusr": true, "size": 158, "uid": 0, "wgrp": false, "woth": false, "wusr": false, "xgrp": false, "xoth": false, "xusr": false } ], "matched": 2 } TASK [linux-system-roles.sudo : Set unauthorized included sudoers files variable] *** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:71 Friday 17 May 2024 14:32:43 +0000 (0:00:00.258) 0:00:05.779 ************ ok: [sut] => { "ansible_facts": { "sudo_unauthorized_files": [] }, "changed": false } TASK [linux-system-roles.sudo : Remove unauthorized included sudoers files] **** task path: /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:77 Friday 17 May 2024 14:32:43 +0000 (0:00:00.036) 0:00:05.815 ************ TASK [Create temp test directory] ********************************************** task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:101 Friday 17 May 2024 14:32:43 +0000 (0:00:00.018) 0:00:05.833 ************ changed: [sut] => { "changed": true, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/var/tmp/sudo_t2c1_rxi", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [Backup sudoers] ********************************************************** task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:108 Friday 17 May 2024 14:32:43 +0000 (0:00:00.247) 0:00:06.081 ************ changed: [sut] => { "changed": true, "checksum": "53c4c5cd1ee1165327dc5f42de2e3db96573b4dc", "dest": "/var/tmp/sudo_t2c1_rxi/sudoers", "gid": 0, "group": "root", "md5sum": "6a9622369d29e9bc6145c6d774059379", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:etc_t:s0", "size": 939, "src": "/etc/sudoers", "state": "file", "uid": 0 } TASK [Backup sudoers.d] ******************************************************** task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:117 Friday 17 May 2024 14:32:44 +0000 (0:00:00.284) 0:00:06.365 ************ changed: [sut] => { "changed": true, "checksum": null, "dest": "/var/tmp/sudo_t2c1_rxi/sudoers.d", "gid": 0, "group": "root", "md5sum": null, "mode": "0644", "owner": "root", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 23, "src": "/etc/sudoers.d", "state": "directory", "uid": 0 } TASK [Check sudoers] *********************************************************** task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:127 Friday 17 May 2024 14:32:44 +0000 (0:00:00.276) 0:00:06.641 ************ changed: [sut] => { "changed": true, "cmd": [ "echo", "5be0fd4d601eaa7ae037045f7333d935520117b6b81f4605f1079cd29f472d0c /etc/sudoers", "|", "sha256sum", "--check" ], "delta": "0:00:00.004002", "end": "2024-05-17 14:32:44.671331", "rc": 0, "start": "2024-05-17 14:32:44.667329" } STDOUT: 5be0fd4d601eaa7ae037045f7333d935520117b6b81f4605f1079cd29f472d0c /etc/sudoers | sha256sum --check TASK [Check pingers] *********************************************************** task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:132 Friday 17 May 2024 14:32:44 +0000 (0:00:00.241) 0:00:06.883 ************ changed: [sut] => { "changed": true, "cmd": [ "echo", "381c8fec4c1aa100be800f6640a12010319ec44b8da72fa39d2558ecc381d41d /etc/sudoers.d/pingers", "|", "sha256sum", "--check" ], "delta": "0:00:00.002543", "end": "2024-05-17 14:32:44.849297", "rc": 0, "start": "2024-05-17 14:32:44.846754" } STDOUT: 381c8fec4c1aa100be800f6640a12010319ec44b8da72fa39d2558ecc381d41d /etc/sudoers.d/pingers | sha256sum --check TASK [Check root] ************************************************************** task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:137 Friday 17 May 2024 14:32:44 +0000 (0:00:00.179) 0:00:07.062 ************ changed: [sut] => { "changed": true, "cmd": [ "echo", "6a4a84012548edf0ee995c126e7329fe1fea62bbc746ec4efc2d664f387b92ba /etc/sudoers.d/root", "|", "sha256sum", "--check" ], "delta": "0:00:00.002361", "end": "2024-05-17 14:32:45.028963", "rc": 0, "start": "2024-05-17 14:32:45.026602" } STDOUT: 6a4a84012548edf0ee995c126e7329fe1fea62bbc746ec4efc2d664f387b92ba /etc/sudoers.d/root | sha256sum --check TASK [Restore sudoers] ********************************************************* task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:141 Friday 17 May 2024 14:32:45 +0000 (0:00:00.177) 0:00:07.240 ************ changed: [sut] => { "changed": true, "checksum": "53c4c5cd1ee1165327dc5f42de2e3db96573b4dc", "dest": "/etc/sudoers", "gid": 0, "group": "root", "md5sum": "6a9622369d29e9bc6145c6d774059379", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:etc_t:s0", "size": 939, "src": "/var/tmp/sudo_t2c1_rxi/sudoers", "state": "file", "uid": 0 } TASK [Restore sudoers.d] ******************************************************* task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:150 Friday 17 May 2024 14:32:45 +0000 (0:00:00.286) 0:00:07.526 ************ changed: [sut] => { "changed": true, "checksum": null, "dest": "/etc/sudoers.d/sudoers.d", "gid": 0, "group": "root", "md5sum": null, "mode": "0644", "owner": "root", "secontext": "unconfined_u:object_r:user_tmp_t:s0", "size": 23, "src": "/var/tmp/sudo_t2c1_rxi/sudoers.d", "state": "directory", "uid": 0 } TASK [Clean up temp directory] ************************************************* task path: /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:159 Friday 17 May 2024 14:32:45 +0000 (0:00:00.282) 0:00:07.808 ************ changed: [sut] => { "changed": true, "path": "/var/tmp/sudo_t2c1_rxi", "state": "absent" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* sut : ok=18 changed=11 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 Friday 17 May 2024 14:32:45 +0000 (0:00:00.196) 0:00:08.005 ************ =============================================================================== linux-system-roles.sudo : Ensure sudo is installed ---------------------- 2.70s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:2 linux-system-roles.sudo : Ensure sudoers include files are configured --- 1.21s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:30 Gathering Facts --------------------------------------------------------- 0.68s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:2 ------------------ linux-system-roles.sudo : Ensure /etc/sudoers is configured ------------- 0.60s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:43 Restore sudoers --------------------------------------------------------- 0.29s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:141 ---------------- Backup sudoers ---------------------------------------------------------- 0.28s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:108 ---------------- Restore sudoers.d ------------------------------------------------------- 0.28s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:150 ---------------- Backup sudoers.d -------------------------------------------------------- 0.28s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:117 ---------------- linux-system-roles.sudo : Ensure include directories are created -------- 0.26s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:20 linux-system-roles.sudo : Search for sudoers files in included directories --- 0.26s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:63 Create temp test directory ---------------------------------------------- 0.25s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:101 ---------------- Check sudoers ----------------------------------------------------------- 0.24s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:127 ---------------- Clean up temp directory ------------------------------------------------- 0.20s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:159 ---------------- Check pingers ----------------------------------------------------------- 0.18s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:132 ---------------- Check root -------------------------------------------------------------- 0.18s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:137 ---------------- linux-system-roles.sudo : Set unauthorized included sudoers files variable --- 0.04s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:71 linux-system-roles.sudo : Set include directories variable -------------- 0.02s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:8 Run the role ------------------------------------------------------------ 0.02s /WORKDIR/git-code5h0vln6n/tests/tests_multiple_sudoers.yml:7 ------------------ linux-system-roles.sudo : Remove unauthorized included sudoers files ---- 0.02s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:77 linux-system-roles.sudo : Set sudoer file paths variable ---------------- 0.02s /WORKDIR/git-code5h0vln6n/tests/roles/linux-system-roles.sudo/tasks/main.yml:14 ---^---^---^---^---^--- # STDERR: ---v---v---v---v---v--- ---^---^---^---^---^---